Logo Loading
Responsibilities

The Senior Security Consultant: GRC & Advisory operates as an external security consultant providing advisory services to clients while also assisting with internal tasks. This is an Advisory and GRC role with a big focus on CPS234, NIST Cybersecurity Framework, PCI DSS and ISO27001. A technical level of knowledge is crucial. As a senior member of the team, you will be expected to take out additional duties as directed by the Chief Operations Officer and other senior team members.

  • Undertaking CPS, NIST, ISO27001 and other Framework Gap Assessments
  • Reviewing and Developing policies, processes and procedures
  • Developing cybersecurity strategies aligned with frameworks such as SABSA
  • Developing roadmaps to guide clients on implementations
  • Working on client site as required to implement controls
  • Undertaking audits aligned with frameworks
  • Auditing and implementing the PCI DSS
  • Developing Board Reports for clients

Responsibilities

The Senior Security Consultant: GRC & Advisory operates as an external security consultant providing advisory services to clients while also assisting with internal tasks. This is an Advisory and GRC role with a big focus on CPS234, NIST Cybersecurity Framework, PCI DSS and ISO27001. A technical level of knowledge is crucial. As a senior member of the team, you will be expected to take out additional duties as directed by the Chief Operations Officer and other senior team members.

  • Undertaking CPS, NIST, ISO27001 and other Framework Gap Assessments
  • Reviewing and Developing policies, processes and procedures
  • Developing cybersecurity strategies aligned with frameworks such as SABSA
  • Developing roadmaps to guide clients on implementations
  • Working on client site as required to implement controls
  • Undertaking audits aligned with frameworks
  • Auditing and implementing the PCI DSS
  • Developing Board Reports for clients

We care for our clients’ business as our business. We think and act like business partners, not auditors. We share our clients’ aspirations, work to understand their reality, and align our incentives with their objectives — so they know we’re in this together. Personal impact, mentoring, and teamwork are just a few of the benefits of building a career at Triskele Labs.

  • Demonstrated experience with CPS and CPG234
  • Experience working on client sites
  • Prior experience developing cybersecurity strategies and roadmaps
  • Prior ISO27001 knowledge
  • Knowledge of cloud security (AWS, Azure, GCP, etc)
  • Technical knowledge and ability to discuss IT and Systems
  • Excellent Written and Spoken English
  • Strategic Thinking and Problem solving
  • Ability to work autonomously and as part of a team
  • CISSP is a must
  • PCI QSA preferable, but not necessary
  • ITIL Foundations
  • CISM/CISA